Privacy & cookies

Who is responsible

The data controller is Hajin Roshanysefat, working professionally as Hazhin Roshany / Hazh.Designs, IČO 08246891, Nevanova 1071/44, Řepy, 163 00 Praha 6, Czech Republic.

For privacy questions or requests, email hazh.d@gmail.com. See also the business details.

What is collected and why

Project enquiries. The form stores your name, email address, message, any optional project context you provide, the referenced portfolio project, a submission reference and the submission date. The name, email and message are needed to handle your enquiry; the project context is optional. You can also contact me directly by email.

I use these details to understand your request, reply and discuss a possible commission. For steps you request before entering a contract with me, the legal basis is GDPR Article 6(1)(b). For business representatives and other correspondence, it is my legitimate interest in responding to relevant enquiries and managing professional relationships, Article 6(1)(f).

Site delivery and security. Hosting providers process technical information such as IP addresses, browser information, request times and security signals to deliver pages and prevent abuse. The form also uses submission details to limit repeated messages. The legal basis is the legitimate interest in running a secure, reliable website, Article 6(1)(f). The enquiry database does not store your IP address.

Enquiries are private. I do not sell this information, use it for automated decisions with legal or similarly significant effects, or automatically add it to a mailing list.

How long information is kept

I review the enquiry inbox monthly and delete enquiries that are no longer needed. Enquiries that do not lead to a project are normally deleted within 12 months of receipt. If a discussion is still active at that point, only information needed to continue it is retained and reviewed again the following month.

If we work together, information needed for the commission becomes part of the project records. Contract, accounting and dispute records may need to be kept longer to meet legal obligations or establish, exercise or defend legal claims. The period depends on the record and the applicable obligation; unrelated enquiry details are not kept for that reason.

Deleting an enquiry removes it from the active website inbox. Any separate email correspondence must be deleted separately. Hosting providers manage operational logs and backup copies under their applicable retention and deletion arrangements; inbox deletion does not mean every backup is immediately erased.

Hosting, email and international transfers

This website uses ChatGPT Sites. OpenAI Ireland Ltd processes hosted visitor data on my behalf under the ChatGPT Sites Data Processing Addendum. Its service providers support hosting and security; this site uses Cloudflare infrastructure. See OpenAI’s subprocessor list.

Hosted data may be processed outside the European Economic Area. The Sites addendum provides for European Commission adequacy decisions or Standard Contractual Clauses as applicable safeguards. This notice does not promise EU-only hosting. You can contact me to request information about the safeguards relevant to your data.

Email sent to or from hazh.d@gmail.com is handled through Google’s Gmail service, subject to Google’s privacy policy, including its international processing arrangements. The website does not automatically email copies of form submissions.

Inbox access is restricted to the site owner and uses ChatGPT sign-in. Public visitors do not need an account to send an enquiry. Visiting external links, including LinkedIn and Behance, takes you to services with their own privacy practices.

Cookies and browser storage

The portfolio application has no advertising pixels or audience analytics. It remembers appearance settings only when you choose them. Essential hosting protection may set security cookies.

Appearance preferences

hazh-theme and hazh-palette use local storage to remember your chosen light/dark mode and colour palette. They remain in that browser until cleared or replaced by a new choice.

Contact draft

hazh-contact-draft uses session storage to carry text into the contact form when navigating within the site. It is removed after being read; otherwise it lasts for the browser tab’s session.

Cloudflare security

__cf_bm helps distinguish visitors from automated abuse. Cloudflare states that it expires after 30 minutes of continuous inactivity. Cloudflare cookie information.

You can clear cookies and local/session storage for this website in your browser settings. This resets saved preferences and may require security checks again. If optional analytics or advertising are introduced, this notice and the consent controls will be updated before those tools are enabled.

Your rights

Depending on the circumstances, you can request access to your personal data, correction, deletion, restriction of processing or a portable copy. You may object to processing based on legitimate interests. These rights are subject to the conditions and exceptions in data protection law.

Email hazh.d@gmail.com, preferably from the address used for your enquiry. I may need proportionate information to verify your identity. Requests are normally answered within one month; if a lawful extension is necessary, I will explain it within that month.

You can complain to the Czech Office for Personal Data Protection (ÚOOÚ), Pplk. Sochora 27, 170 00 Praha 7, or to the supervisory authority where you habitually live or work, or where the alleged infringement took place.